Skip to content
OpenAdvisories

Archive

10 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /10 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2024-35242 Public exploit

    Composer vulnerable to command injection via malicious git/hg branch names

    Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the `composer install` command running inside a git/hg repository which has specially crafted branch names can lead to command injection. This requires cloning unt…

    composer composer composer/composer composer Debian Ubuntu Alpine Wolfi Packagist
  • Medium 5.9
    CVE-2024-27815 Public exploit

    An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 17.5 and iPadOS 1…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • High 8.6
    CVE-2024-36416 Public exploit

    SuiteCRM v4 API Excessive log data DOS

    SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6.1, a deprecated v4 API example with no log rotation allows denial of service by logging excessive data. Versions 7.14.4 and 8.6.1 contain …

    salesagility SuiteCRM
  • Critical 9.3
    CVE-2024-37051 Public exploit

    GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: Intelli…

    JetBrains IntelliJ IDEA PyCharm WebStorm
  • High 7.8
    CVE-2024-36971 Exploited Public exploit

    net: fix __dst_negative_advice() race

    In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible UAF. RCU rules are that we must first c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV Aug 7, 2024
  • Critical 9.8
    CVE-2024-37393 Public exploit Scanner template

    Multiple LDAP injections vulnerabilities exist in SecurEnvoy MFA before 9.4.514 due to improper validation of user-supp…